Privacy Policy

Last updated: February 2026

1. Introduction

This privacy policy explains how Edgar Valdez ("I", "me", "my") handles information in connection with the website valdezdev.work and associated applications and services (collectively, the "Services"), including integrations with third-party social media platforms.

2. Information Collection

The portfolio website itself is a static site that does not directly collect personal data. However, when you use the Services that integrate with third-party platforms, the following information may be collected or accessed:

2.1 Information from OAuth Authentication

When you connect your social media accounts via OAuth, the Services may receive:

• Your account profile information (name, username, profile picture)
• Your email address (if provided by the platform)
• Authentication tokens (access tokens, refresh tokens) required to perform authorized actions
• Account identifiers used to associate your account with the Services

2.2 Information from Connected Platforms

Depending on the permissions you grant, the Services may access:

• Content you create through the Services for publishing
• Publishing status and metadata (post IDs, timestamps, engagement metrics)
• Account-level information necessary for content publishing

3. How We Use Your Information

Information accessed through the Services is used exclusively to:

• Authenticate your identity and maintain your session
• Publish content to your connected social media accounts on your behalf
• Display the status of published content
• Provide and improve the functionality of the Services

We do not use your data for advertising, profiling, or any purpose unrelated to the core functionality of the Services.

4. Third-Party Platform Integrations

The Services integrate with the following platforms. Each integration accesses only the data necessary for its intended functionality:

4.1 Google APIs

The Services use Google APIs (OAuth 2.0 verified project: antplify-dev, Project ID: 1094847225705) to access Google services such as YouTube and Google Business Profile. The Services' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Scopes requested are limited to content publishing and account management.

4.2 Instagram API (Meta)

The Services use the Instagram Graph API / Content Publishing API to publish content to your Instagram account. Data accessed includes your Instagram profile information and content publishing capabilities. Usage is governed by Meta's Platform Terms and Meta's Privacy Policy.

4.3 TikTok API

The Services use the TikTok API to publish content to your TikTok account. Data accessed is limited to account information necessary for publishing. Usage is governed by TikTok's Terms of Service and TikTok's Privacy Policy.

4.4 Twitter/X API

The Services use the Twitter/X API to publish content to your Twitter/X account. Data accessed is limited to account information necessary for publishing. Usage is governed by Twitter/X's Terms of Service and Twitter/X's Privacy Policy.

4.5 Cloudflare

This website is hosted on Cloudflare Pages, which may collect:

• Basic web analytics (page views, country-level location data)
• Standard server logs (IP addresses, browser type, timestamps)

For more information, see Cloudflare's Privacy Policy.

5. Data Storage & Retention

• Authentication tokens are stored securely and retained only for as long as necessary to maintain your connection to the Services. Tokens are deleted when you disconnect your account.
• Content data (text, media) that you submit for publishing is processed and transmitted to the target platform. It is not permanently stored by the Services after successful publishing.
• Account information (username, profile data) is retained only while your account is connected to the Services.

6. Data Sharing

I do not sell, trade, or otherwise transfer any personal information to third parties. Data is only shared with the specific third-party platforms you have authorized (e.g., when publishing content to your Instagram account, your content is sent to Instagram's API).

7. Data Security

The Services implement the following security measures:

• HTTPS encryption via Cloudflare SSL/TLS for all communications
• OAuth 2.0 for secure authentication (no passwords are stored)
• Authentication tokens are stored securely and encrypted
• Minimum necessary permissions (scopes) are requested from each platform

While I strive to protect your information, no method of transmission over the Internet is 100% secure.

8. Your Rights & Choices

You have the right to:

• Revoke access: Disconnect your social media accounts at any time through each platform's account settings or through the Services.
• Request data deletion: Contact me to request deletion of any data associated with your account.
• Access your data: Request a copy of the data the Services hold about you.
• Withdraw consent: You may stop using the Services at any time.

9. Children's Privacy

The Services are not directed at children under the age of 13. I do not knowingly collect any information from children. If you believe a child has provided data through the Services, please contact me immediately.

10. Changes to This Policy

This privacy policy may be updated from time to time. Changes will be reflected on this page with an updated revision date. We encourage you to review this page periodically.

11. Contact

For privacy-related questions, data requests, or concerns, please contact: contact@valdezdev.work